@kustodian/nodes 1.1.0 → 2.0.0

package/{src/index.ts → dist/index.d.ts}

@@ -1,3 +1,5 @@
-export * from './types.js';
+export * from './kubectl-labeler.js';
 export * from './labeler.js';
 export * from './profile.js';
+export * from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,509 @@
+// ../core/dist/index.js
+function create_error(code, message, cause) {
+  return { code, message, cause };
+}
+var ErrorCodes = {
+  UNKNOWN: "UNKNOWN",
+  INVALID_ARGUMENT: "INVALID_ARGUMENT",
+  NOT_FOUND: "NOT_FOUND",
+  ALREADY_EXISTS: "ALREADY_EXISTS",
+  FILE_NOT_FOUND: "FILE_NOT_FOUND",
+  FILE_READ_ERROR: "FILE_READ_ERROR",
+  FILE_WRITE_ERROR: "FILE_WRITE_ERROR",
+  DIRECTORY_NOT_FOUND: "DIRECTORY_NOT_FOUND",
+  PARSE_ERROR: "PARSE_ERROR",
+  YAML_PARSE_ERROR: "YAML_PARSE_ERROR",
+  JSON_PARSE_ERROR: "JSON_PARSE_ERROR",
+  VALIDATION_ERROR: "VALIDATION_ERROR",
+  SCHEMA_VALIDATION_ERROR: "SCHEMA_VALIDATION_ERROR",
+  CONFIG_NOT_FOUND: "CONFIG_NOT_FOUND",
+  CONFIG_INVALID: "CONFIG_INVALID",
+  TEMPLATE_NOT_FOUND: "TEMPLATE_NOT_FOUND",
+  CLUSTER_NOT_FOUND: "CLUSTER_NOT_FOUND",
+  PROFILE_NOT_FOUND: "PROFILE_NOT_FOUND",
+  NETWORK_ERROR: "NETWORK_ERROR",
+  CONNECTION_REFUSED: "CONNECTION_REFUSED",
+  TIMEOUT: "TIMEOUT",
+  SSH_CONNECTION_ERROR: "SSH_CONNECTION_ERROR",
+  SSH_AUTH_ERROR: "SSH_AUTH_ERROR",
+  SSH_COMMAND_ERROR: "SSH_COMMAND_ERROR",
+  K8S_CONNECTION_ERROR: "K8S_CONNECTION_ERROR",
+  K8S_API_ERROR: "K8S_API_ERROR",
+  NODE_NOT_READY: "NODE_NOT_READY",
+  BOOTSTRAP_ERROR: "BOOTSTRAP_ERROR",
+  BOOTSTRAP_STATE_ERROR: "BOOTSTRAP_STATE_ERROR",
+  CLUSTER_PROVIDER_ERROR: "CLUSTER_PROVIDER_ERROR",
+  PLUGIN_NOT_FOUND: "PLUGIN_NOT_FOUND",
+  PLUGIN_LOAD_ERROR: "PLUGIN_LOAD_ERROR",
+  PLUGIN_EXECUTION_ERROR: "PLUGIN_EXECUTION_ERROR",
+  DEPENDENCY_CYCLE: "DEPENDENCY_CYCLE",
+  DEPENDENCY_MISSING: "DEPENDENCY_MISSING",
+  DEPENDENCY_SELF_REFERENCE: "DEPENDENCY_SELF_REFERENCE",
+  DEPENDENCY_VALIDATION_ERROR: "DEPENDENCY_VALIDATION_ERROR",
+  SECRET_CLI_NOT_FOUND: "SECRET_CLI_NOT_FOUND",
+  SECRET_NOT_FOUND: "SECRET_NOT_FOUND",
+  SECRET_AUTH_ERROR: "SECRET_AUTH_ERROR",
+  SECRET_TIMEOUT: "SECRET_TIMEOUT",
+  SOURCE_FETCH_ERROR: "SOURCE_FETCH_ERROR",
+  SOURCE_AUTH_ERROR: "SOURCE_AUTH_ERROR",
+  SOURCE_TIMEOUT: "SOURCE_TIMEOUT",
+  SOURCE_CHECKSUM_MISMATCH: "SOURCE_CHECKSUM_MISMATCH",
+  SOURCE_VERSION_NOT_FOUND: "SOURCE_VERSION_NOT_FOUND",
+  CACHE_READ_ERROR: "CACHE_READ_ERROR",
+  CACHE_WRITE_ERROR: "CACHE_WRITE_ERROR",
+  CACHE_CORRUPT: "CACHE_CORRUPT"
+};
+var Errors = {
+  unknown(message, cause) {
+    return create_error(ErrorCodes.UNKNOWN, message, cause);
+  },
+  invalid_argument(argument, reason) {
+    return create_error(ErrorCodes.INVALID_ARGUMENT, `Invalid argument '${argument}': ${reason}`);
+  },
+  not_found(resource, identifier) {
+    return create_error(ErrorCodes.NOT_FOUND, `${resource} '${identifier}' not found`);
+  },
+  already_exists(resource, identifier) {
+    return create_error(ErrorCodes.ALREADY_EXISTS, `${resource} '${identifier}' already exists`);
+  },
+  file_not_found(path) {
+    return create_error(ErrorCodes.FILE_NOT_FOUND, `File not found: ${path}`);
+  },
+  file_read_error(path, cause) {
+    return create_error(ErrorCodes.FILE_READ_ERROR, `Failed to read file: ${path}`, cause);
+  },
+  file_write_error(path, cause) {
+    return create_error(ErrorCodes.FILE_WRITE_ERROR, `Failed to write file: ${path}`, cause);
+  },
+  parse_error(format, message, cause) {
+    return create_error(ErrorCodes.PARSE_ERROR, `Failed to parse ${format}: ${message}`, cause);
+  },
+  yaml_parse_error(message, cause) {
+    return create_error(ErrorCodes.YAML_PARSE_ERROR, `YAML parse error: ${message}`, cause);
+  },
+  validation_error(message, cause) {
+    return create_error(ErrorCodes.VALIDATION_ERROR, message, cause);
+  },
+  schema_validation_error(errors) {
+    return create_error(ErrorCodes.SCHEMA_VALIDATION_ERROR, `Schema validation failed:
+${errors.map((e) => `  - ${e}`).join(`
+`)}`);
+  },
+  config_not_found(config_type, path) {
+    return create_error(ErrorCodes.CONFIG_NOT_FOUND, `${config_type} configuration not found at: ${path}`);
+  },
+  template_not_found(name) {
+    return create_error(ErrorCodes.TEMPLATE_NOT_FOUND, `Template '${name}' not found`);
+  },
+  cluster_not_found(name) {
+    return create_error(ErrorCodes.CLUSTER_NOT_FOUND, `Cluster '${name}' not found`);
+  },
+  profile_not_found(name) {
+    return create_error(ErrorCodes.PROFILE_NOT_FOUND, `Node profile '${name}' not found`);
+  },
+  ssh_connection_error(host, cause) {
+    return create_error(ErrorCodes.SSH_CONNECTION_ERROR, `Failed to connect to ${host} via SSH`, cause);
+  },
+  ssh_auth_error(host, cause) {
+    return create_error(ErrorCodes.SSH_AUTH_ERROR, `SSH authentication failed for ${host}`, cause);
+  },
+  bootstrap_error(message, cause) {
+    return create_error(ErrorCodes.BOOTSTRAP_ERROR, `Bootstrap failed: ${message}`, cause);
+  },
+  plugin_not_found(name) {
+    return create_error(ErrorCodes.PLUGIN_NOT_FOUND, `Plugin '${name}' not found`);
+  },
+  plugin_load_error(name, cause) {
+    return create_error(ErrorCodes.PLUGIN_LOAD_ERROR, `Failed to load plugin '${name}'`, cause);
+  },
+  dependency_cycle(cycle) {
+    const cycle_str = cycle.join(" → ");
+    return create_error(ErrorCodes.DEPENDENCY_CYCLE, `Dependency cycle detected: ${cycle_str}`);
+  },
+  dependency_missing(source, target) {
+    return create_error(ErrorCodes.DEPENDENCY_MISSING, `Kustomization '${source}' depends on '${target}' which does not exist`);
+  },
+  dependency_self_reference(node) {
+    return create_error(ErrorCodes.DEPENDENCY_SELF_REFERENCE, `Kustomization '${node}' cannot depend on itself`);
+  },
+  dependency_validation_error(errors) {
+    return create_error(ErrorCodes.DEPENDENCY_VALIDATION_ERROR, `Dependency validation failed:
+${errors.map((e) => `  - ${e}`).join(`
+`)}`);
+  },
+  secret_cli_not_found(provider, cli_name) {
+    return create_error(ErrorCodes.SECRET_CLI_NOT_FOUND, `${provider} CLI (${cli_name}) not found. Please install it first.`);
+  },
+  secret_not_found(provider, ref) {
+    return create_error(ErrorCodes.SECRET_NOT_FOUND, `Secret not found in ${provider}: ${ref}`);
+  },
+  secret_auth_error(provider, cause) {
+    return create_error(ErrorCodes.SECRET_AUTH_ERROR, `${provider} authentication failed. Check your credentials.`, cause);
+  },
+  secret_timeout(provider, timeout) {
+    return create_error(ErrorCodes.SECRET_TIMEOUT, `${provider} operation timed out after ${timeout}ms`);
+  },
+  source_fetch_error(source, cause) {
+    return create_error(ErrorCodes.SOURCE_FETCH_ERROR, `Failed to fetch template source '${source}'`, cause);
+  },
+  source_auth_error(source, cause) {
+    return create_error(ErrorCodes.SOURCE_AUTH_ERROR, `Authentication failed for source '${source}'`, cause);
+  },
+  source_timeout(source, timeout) {
+    return create_error(ErrorCodes.SOURCE_TIMEOUT, `Source '${source}' operation timed out after ${timeout}ms`);
+  },
+  source_checksum_mismatch(source, expected, actual) {
+    return create_error(ErrorCodes.SOURCE_CHECKSUM_MISMATCH, `Checksum mismatch for '${source}': expected ${expected}, got ${actual}`);
+  },
+  source_version_not_found(source, version) {
+    return create_error(ErrorCodes.SOURCE_VERSION_NOT_FOUND, `Version '${version}' not found for source '${source}'`);
+  },
+  cache_read_error(path, cause) {
+    return create_error(ErrorCodes.CACHE_READ_ERROR, `Failed to read cache at: ${path}`, cause);
+  },
+  cache_write_error(path, cause) {
+    return create_error(ErrorCodes.CACHE_WRITE_ERROR, `Failed to write cache at: ${path}`, cause);
+  },
+  cache_corrupt(path) {
+    return create_error(ErrorCodes.CACHE_CORRUPT, `Cache is corrupt at: ${path}`);
+  }
+};
+function success(value) {
+  return { success: true, value };
+}
+function failure(error) {
+  return { success: false, error };
+}
+function is_success(result) {
+  return result.success;
+}
+
+// src/types.ts
+var DEFAULT_LABEL_PREFIX = "kustodian.io";
+function format_label_key(key, prefix = DEFAULT_LABEL_PREFIX) {
+  if (key.includes("/")) {
+    return key;
+  }
+  return `${prefix}/${key}`;
+}
+function format_label_value(value) {
+  if (typeof value === "boolean") {
+    return value ? "true" : "false";
+  }
+  return String(value);
+}
+function format_node_labels(labels, prefix = DEFAULT_LABEL_PREFIX) {
+  if (!labels) {
+    return {};
+  }
+  const result = {};
+  for (const [key, value] of Object.entries(labels)) {
+    const formatted_key = format_label_key(key, prefix);
+    result[formatted_key] = format_label_value(value);
+  }
+  return result;
+}
+function get_node_ssh_config(node, default_ssh) {
+  return {
+    ...default_ssh,
+    ...node.ssh
+  };
+}
+function is_controller(node) {
+  return node.role === "controller" || node.role === "controller+worker";
+}
+function is_worker(node) {
+  return node.role === "worker" || node.role === "controller+worker";
+}
+function get_controllers(nodes) {
+  return nodes.filter(is_controller);
+}
+function get_workers(nodes) {
+  return nodes.filter(is_worker);
+}
+function get_primary_controller(nodes) {
+  return nodes.find(is_controller);
+}
+
+// src/labeler.ts
+function calculate_label_changes(node, current_labels, prefix) {
+  const changes = [];
+  const desired_labels = format_node_labels(node.labels, prefix);
+  for (const [key, value] of Object.entries(desired_labels)) {
+    const current_value = current_labels[key];
+    if (current_value === undefined) {
+      changes.push({
+        node: node.name,
+        key,
+        value,
+        operation: "add"
+      });
+    } else if (current_value !== value) {
+      changes.push({
+        node: node.name,
+        key,
+        value,
+        operation: "update"
+      });
+    }
+  }
+  for (const key of Object.keys(current_labels)) {
+    if (key.startsWith(`${prefix}/`) && !(key in desired_labels)) {
+      changes.push({
+        node: node.name,
+        key,
+        operation: "remove"
+      });
+    }
+  }
+  return changes;
+}
+function calculate_all_label_changes(node_list, current_labels_by_node) {
+  const prefix = node_list.label_prefix ?? "kustodian.io";
+  const all_changes = [];
+  for (const node of node_list.nodes) {
+    const current_labels = current_labels_by_node.get(node.name) ?? {};
+    const changes = calculate_label_changes(node, current_labels, prefix);
+    all_changes.push(...changes);
+  }
+  return all_changes;
+}
+function format_label_change(change) {
+  switch (change.operation) {
+    case "add":
+      return `[+] ${change.node}: ${change.key}=${change.value}`;
+    case "update":
+      return `[~] ${change.node}: ${change.key}=${change.value}`;
+    case "remove":
+      return `[-] ${change.node}: ${change.key}`;
+  }
+}
+function group_changes_by_node(changes) {
+  const grouped = new Map;
+  for (const change of changes) {
+    const node_changes = grouped.get(change.node) ?? [];
+    node_changes.push(change);
+    grouped.set(change.node, node_changes);
+  }
+  return grouped;
+}
+function create_dry_run_result(changes) {
+  return {
+    changes,
+    applied: 0,
+    skipped: changes.length
+  };
+}
+function create_mock_labeler(labels_by_node) {
+  return {
+    async get_labels(node_name) {
+      const labels = labels_by_node.get(node_name);
+      if (!labels) {
+        return success({});
+      }
+      return success(labels);
+    },
+    async apply_change(_change) {
+      return success(undefined);
+    },
+    async sync_labels(node_list, options) {
+      const changes = calculate_all_label_changes(node_list, labels_by_node);
+      if (options?.dry_run) {
+        return success(create_dry_run_result(changes));
+      }
+      return success({
+        changes,
+        applied: changes.length,
+        skipped: 0
+      });
+    }
+  };
+}
+
+// src/kubectl-labeler.ts
+function create_kubectl_labeler(kubectl) {
+  return {
+    async get_labels(node_name) {
+      const get_result = await kubectl.get({ kind: "Node", name: node_name });
+      if (!is_success(get_result)) {
+        return get_result;
+      }
+      const nodes = get_result.value;
+      if (nodes.length === 0) {
+        return failure(Errors.not_found("Node", node_name));
+      }
+      const node = nodes[0];
+      if (!node) {
+        return failure(Errors.not_found("Node", node_name));
+      }
+      const labels = node.metadata.labels ?? {};
+      return success(labels);
+    },
+    async apply_change(change) {
+      if (change.operation === "remove") {
+        const remove_key = `${change.key}-`;
+        const label_result2 = await kubectl.label(change.node, { [remove_key]: "" });
+        if (!is_success(label_result2)) {
+          return failure({
+            code: "KUBECTL_LABEL_ERROR",
+            message: `Failed to remove label ${change.key} from node ${change.node}: ${label_result2.error.message}`
+          });
+        }
+        return success(undefined);
+      }
+      if (!change.value) {
+        return failure(Errors.validation_error(`Label change for ${change.key} requires a value for ${change.operation} operation`));
+      }
+      const label_result = await kubectl.label(change.node, {
+        [change.key]: change.value
+      });
+      if (!is_success(label_result)) {
+        return failure({
+          code: "KUBECTL_LABEL_ERROR",
+          message: `Failed to ${change.operation} label ${change.key}=${change.value} on node ${change.node}: ${label_result.error.message}`
+        });
+      }
+      return success(undefined);
+    },
+    async sync_labels(node_list, options = {}) {
+      const current_labels_by_node = new Map;
+      for (const node of node_list.nodes) {
+        const labels_result = await this.get_labels(node.name);
+        if (!is_success(labels_result)) {
+          return failure({
+            code: "KUBECTL_LABEL_ERROR",
+            message: `Failed to get labels for node ${node.name}: ${labels_result.error.message}`
+          });
+        }
+        current_labels_by_node.set(node.name, labels_result.value);
+      }
+      const changes = calculate_all_label_changes(node_list, current_labels_by_node);
+      if (options.dry_run) {
+        return success(create_dry_run_result(changes));
+      }
+      const grouped_changes = group_changes_by_node(changes);
+      let applied = 0;
+      let failed = 0;
+      for (const [node_name, node_changes] of grouped_changes) {
+        for (const change of node_changes) {
+          const apply_result = await this.apply_change(change);
+          if (is_success(apply_result)) {
+            applied++;
+          } else {
+            failed++;
+            console.warn(`  ⚠ Failed to apply change on ${node_name}: ${apply_result.error.message}`);
+          }
+        }
+      }
+      return success({
+        changes,
+        applied,
+        skipped: failed
+      });
+    }
+  };
+}
+// src/profile.ts
+function merge_taints(profile_taints, node_taints) {
+  if (!profile_taints && !node_taints) {
+    return;
+  }
+  if (!profile_taints) {
+    return node_taints;
+  }
+  if (!node_taints) {
+    return profile_taints;
+  }
+  const node_taint_keys = new Set(node_taints.map((t) => `${t.key}:${t.effect}`));
+  const filtered_profile_taints = profile_taints.filter((t) => !node_taint_keys.has(`${t.key}:${t.effect}`));
+  return [...filtered_profile_taints, ...node_taints];
+}
+function resolve_node_profile(node, profile) {
+  if (!profile) {
+    const { profile: _, ...resolved2 } = node;
+    return resolved2;
+  }
+  const merged_labels = profile.labels || node.labels ? { ...profile.labels, ...node.labels } : undefined;
+  const merged_taints = merge_taints(profile.taints, node.taints);
+  const merged_annotations = profile.annotations || node.annotations ? { ...profile.annotations, ...node.annotations } : undefined;
+  const resolved = {
+    name: node.name,
+    role: node.role,
+    address: node.address
+  };
+  if (node.ssh !== undefined) {
+    resolved.ssh = node.ssh;
+  }
+  if (merged_labels !== undefined) {
+    resolved.labels = merged_labels;
+  }
+  if (merged_taints !== undefined) {
+    resolved.taints = merged_taints;
+  }
+  if (merged_annotations !== undefined) {
+    resolved.annotations = merged_annotations;
+  }
+  return resolved;
+}
+function resolve_all_node_profiles(nodes, profiles) {
+  const resolved = [];
+  const errors = [];
+  for (const node of nodes) {
+    if (node.profile) {
+      const profile = profiles.get(node.profile);
+      if (!profile) {
+        errors.push(`Node '${node.name}' references unknown profile '${node.profile}'`);
+        const { profile: _, ...node_without_profile } = node;
+        resolved.push(node_without_profile);
+      } else {
+        resolved.push(resolve_node_profile(node, profile));
+      }
+    } else {
+      resolved.push(resolve_node_profile(node, undefined));
+    }
+  }
+  return { resolved, errors };
+}
+function get_referenced_profiles(nodes) {
+  const profiles = new Set;
+  for (const node of nodes) {
+    if (node.profile) {
+      profiles.add(node.profile);
+    }
+  }
+  return profiles;
+}
+function validate_profile_references(nodes, profiles) {
+  const errors = [];
+  const referenced = get_referenced_profiles(nodes);
+  for (const profile_name of referenced) {
+    if (!profiles.has(profile_name)) {
+      const nodes_using = nodes.filter((n) => n.profile === profile_name).map((n) => n.name);
+      errors.push(`Profile '${profile_name}' not found, referenced by nodes: ${nodes_using.join(", ")}`);
+    }
+  }
+  return errors;
+}
+export {
+  validate_profile_references,
+  resolve_node_profile,
+  resolve_all_node_profiles,
+  is_worker,
+  is_controller,
+  group_changes_by_node,
+  get_workers,
+  get_referenced_profiles,
+  get_primary_controller,
+  get_node_ssh_config,
+  get_controllers,
+  format_node_labels,
+  format_label_value,
+  format_label_key,
+  format_label_change,
+  create_mock_labeler,
+  create_kubectl_labeler,
+  create_dry_run_result,
+  calculate_label_changes,
+  calculate_all_label_changes,
+  DEFAULT_LABEL_PREFIX
+};

package/dist/kubectl-labeler.d.ts

@@ -0,0 +1,7 @@
+import type { KubectlClientType } from '@kustodian/k8s';
+import { type NodeLabelerType } from './labeler.js';
+/**
+ * Creates a node labeler that uses kubectl to manage node labels.
+ */
+export declare function create_kubectl_labeler(kubectl: KubectlClientType): NodeLabelerType;
+//# sourceMappingURL=kubectl-labeler.d.ts.map

package/dist/kubectl-labeler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubectl-labeler.d.ts","sourceRoot":"","sources":["../src/kubectl-labeler.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAExD,OAAO,EACL,KAAK,eAAe,EAIrB,MAAM,cAAc,CAAC;AAEtB;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,iBAAiB,GAAG,eAAe,CA2GlF"}

package/dist/labeler.d.ts

@@ -0,0 +1,74 @@
+import type { KustodianErrorType } from '@kustodian/core';
+import { type ResultType } from '@kustodian/core';
+import { type NodeListType, type NodeType } from './types.js';
+/**
+ * Label operation types.
+ */
+export type LabelOperationType = 'add' | 'update' | 'remove';
+/**
+ * A single label change to be applied.
+ */
+export interface LabelChangeType {
+    node: string;
+    key: string;
+    value?: string;
+    operation: LabelOperationType;
+}
+/**
+ * Options for the label sync operation.
+ */
+export interface LabelSyncOptionsType {
+    dry_run?: boolean;
+    verify?: boolean;
+}
+/**
+ * Result of a label sync operation.
+ */
+export interface LabelSyncResultType {
+    changes: LabelChangeType[];
+    applied: number;
+    skipped: number;
+}
+/**
+ * Calculates the label changes needed for a node.
+ */
+export declare function calculate_label_changes(node: NodeType, current_labels: Record<string, string>, prefix: string): LabelChangeType[];
+/**
+ * Calculates all label changes for a node list.
+ */
+export declare function calculate_all_label_changes(node_list: NodeListType, current_labels_by_node: Map<string, Record<string, string>>): LabelChangeType[];
+/**
+ * Formats a label change for display.
+ */
+export declare function format_label_change(change: LabelChangeType): string;
+/**
+ * Groups label changes by node.
+ */
+export declare function group_changes_by_node(changes: LabelChangeType[]): Map<string, LabelChangeType[]>;
+/**
+ * Creates a dry-run result from label changes.
+ */
+export declare function create_dry_run_result(changes: LabelChangeType[]): LabelSyncResultType;
+/**
+ * Node labeler service interface.
+ * This is implemented by the actual Kubernetes client.
+ */
+export interface NodeLabelerType {
+    /**
+     * Gets the current labels for a node.
+     */
+    get_labels(node_name: string): Promise<ResultType<Record<string, string>, KustodianErrorType>>;
+    /**
+     * Applies a label change to a node.
+     */
+    apply_change(change: LabelChangeType): Promise<ResultType<void, KustodianErrorType>>;
+    /**
+     * Syncs labels for all nodes in the list.
+     */
+    sync_labels(node_list: NodeListType, options?: LabelSyncOptionsType): Promise<ResultType<LabelSyncResultType, KustodianErrorType>>;
+}
+/**
+ * Creates a mock labeler for testing.
+ */
+export declare function create_mock_labeler(labels_by_node: Map<string, Record<string, string>>): NodeLabelerType;
+//# sourceMappingURL=labeler.d.ts.map

package/dist/labeler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"labeler.d.ts","sourceRoot":"","sources":["../src/labeler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,KAAK,UAAU,EAAW,MAAM,iBAAiB,CAAC;AAE3D,OAAO,EAAE,KAAK,YAAY,EAAE,KAAK,QAAQ,EAAsB,MAAM,YAAY,CAAC;AAElF;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,KAAK,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAE7D;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,kBAAkB,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,QAAQ,EACd,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACtC,MAAM,EAAE,MAAM,GACb,eAAe,EAAE,CAqCnB;AAED;;GAEG;AACH,wBAAgB,2BAA2B,CACzC,SAAS,EAAE,YAAY,EACvB,sBAAsB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAC1D,eAAe,EAAE,CAWnB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,CASnE;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE,CAAC,CAUhG;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,mBAAmB,CAMrF;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B;;OAEG;IACH,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAE/F;;OAEG;IACH,YAAY,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAErF;;OAEG;IACH,WAAW,CACT,SAAS,EAAE,YAAY,EACvB,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,UAAU,CAAC,mBAAmB,EAAE,kBAAkB,CAAC,CAAC,CAAC;CACjE;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAClD,eAAe,CA6BjB"}

package/dist/profile.d.ts

@@ -0,0 +1,58 @@
+import type { NodeType, TaintType } from './types.js';
+/**
+ * Node profile type for profile resolution.
+ * This mirrors the NodeProfileType from @kustodian/schema but is defined here
+ * to avoid circular dependencies.
+ */
+export interface NodeProfileType {
+    name: string;
+    display_name?: string;
+    description?: string;
+    labels?: Record<string, string | boolean | number>;
+    taints?: TaintType[];
+    annotations?: Record<string, string>;
+}
+/**
+ * Resolved node type with profile values merged.
+ * The profile field is removed after resolution.
+ */
+export type ResolvedNodeType = Omit<NodeType, 'profile'>;
+/**
+ * Resolves a node with its profile configuration.
+ * Profile values are merged with node values, where node values take precedence.
+ *
+ * Merge strategy:
+ * - labels: Profile labels are base, node labels override/extend
+ * - taints: Node taints override profile taints with same key+effect, others are combined
+ * - annotations: Profile annotations are base, node annotations override/extend
+ * - ssh: Not inherited from profile (kept as node-specific)
+ *
+ * @param node - The node to resolve
+ * @param profile - The profile to apply, or undefined if no profile
+ * @returns The resolved node with profile values merged
+ */
+export declare function resolve_node_profile(node: NodeType, profile: NodeProfileType | undefined): ResolvedNodeType;
+/**
+ * Resolves all nodes in a list with their profiles.
+ *
+ * @param nodes - The nodes to resolve
+ * @param profiles - Map of profile name to profile
+ * @returns Object with resolved nodes and any missing profile errors
+ */
+export declare function resolve_all_node_profiles(nodes: NodeType[], profiles: Map<string, NodeProfileType>): {
+    resolved: ResolvedNodeType[];
+    errors: string[];
+};
+/**
+ * Collects all unique profile names referenced by nodes.
+ */
+export declare function get_referenced_profiles(nodes: NodeType[]): Set<string>;
+/**
+ * Validates that all referenced profiles exist.
+ *
+ * @param nodes - The nodes to check
+ * @param profiles - Map of available profiles
+ * @returns Array of error messages for missing profiles
+ */
+export declare function validate_profile_references(nodes: NodeType[], profiles: Map<string, NodeProfileType>): string[];
+//# sourceMappingURL=profile.d.ts.map

package/dist/profile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.d.ts","sourceRoot":"","sources":["../src/profile.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEtD;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC,CAAC;IACnD,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC;AAED;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;AAkCzD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,QAAQ,EACd,OAAO,EAAE,eAAe,GAAG,SAAS,GACnC,gBAAgB,CAwClB;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,QAAQ,EAAE,EACjB,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,GACrC;IAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAqBpD;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,CAQtE;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,QAAQ,EAAE,EACjB,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,GACrC,MAAM,EAAE,CAcV"}

package/dist/types.d.ts

@@ -0,0 +1,84 @@
+/**
+ * Node role in the cluster.
+ */
+export type NodeRoleType = 'controller' | 'worker' | 'controller+worker';
+/**
+ * SSH configuration for connecting to a node.
+ */
+export interface SshConfigType {
+    user?: string;
+    key_path?: string;
+    known_hosts_path?: string;
+    port?: number;
+}
+/**
+ * Kubernetes taint configuration.
+ */
+export interface TaintType {
+    key: string;
+    value?: string;
+    effect: 'NoSchedule' | 'PreferNoSchedule' | 'NoExecute';
+}
+/**
+ * Node definition with its configuration.
+ */
+export interface NodeType {
+    name: string;
+    role: NodeRoleType;
+    address: string;
+    profile?: string;
+    ssh?: SshConfigType;
+    labels?: Record<string, string | boolean | number>;
+    taints?: TaintType[];
+    annotations?: Record<string, string>;
+}
+/**
+ * Node list with default SSH configuration.
+ */
+export interface NodeListType {
+    cluster: string;
+    label_prefix?: string;
+    ssh?: SshConfigType;
+    nodes: NodeType[];
+}
+/**
+ * Default label prefix.
+ */
+export declare const DEFAULT_LABEL_PREFIX = "kustodian.io";
+/**
+ * Formats a label key with the configured prefix.
+ */
+export declare function format_label_key(key: string, prefix?: string): string;
+/**
+ * Formats a label value as a string.
+ */
+export declare function format_label_value(value: string | boolean | number): string;
+/**
+ * Formats all labels for a node with the configured prefix.
+ */
+export declare function format_node_labels(labels: Record<string, string | boolean | number> | undefined, prefix?: string): Record<string, string>;
+/**
+ * Gets the SSH configuration for a node, merging with defaults.
+ */
+export declare function get_node_ssh_config(node: NodeType, default_ssh?: SshConfigType): SshConfigType;
+/**
+ * Checks if a node has a controller role.
+ */
+export declare function is_controller(node: NodeType): boolean;
+/**
+ * Checks if a node has a worker role.
+ */
+export declare function is_worker(node: NodeType): boolean;
+/**
+ * Gets all controller nodes from a node list.
+ */
+export declare function get_controllers(nodes: NodeType[]): NodeType[];
+/**
+ * Gets all worker nodes from a node list.
+ */
+export declare function get_workers(nodes: NodeType[]): NodeType[];
+/**
+ * Gets the primary controller node (first controller).
+ */
+export declare function get_primary_controller(nodes: NodeType[]): NodeType | undefined;
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,YAAY,GAAG,QAAQ,GAAG,mBAAmB,CAAC;AAEzE;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,YAAY,GAAG,kBAAkB,GAAG,WAAW,CAAC;CACzD;AAED;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,aAAa,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC,CAAC;IACnD,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,GAAG,CAAC,EAAE,aAAa,CAAC;IACpB,KAAK,EAAE,QAAQ,EAAE,CAAC;CACnB;AAED;;GAEG;AACH,eAAO,MAAM,oBAAoB,iBAAiB,CAAC;AAEnD;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,GAAE,MAA6B,GAAG,MAAM,CAM3F;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,CAK3E;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC,GAAG,SAAS,EAC7D,MAAM,GAAE,MAA6B,GACpC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAWxB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,QAAQ,EAAE,WAAW,CAAC,EAAE,aAAa,GAAG,aAAa,CAK9F;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAErD;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAEjD;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,QAAQ,EAAE,CAE7D;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,QAAQ,EAAE,CAEzD;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,QAAQ,GAAG,SAAS,CAE9E"}

package/package.json

@@ -1,23 +1,25 @@
 {
   "name": "@kustodian/nodes",
-  "version": "1.1.0",
+  "version": "2.0.0",
   "description": "Node definitions, roles, and labeling for Kustodian",
   "type": "module",
-  "main": "./src/index.ts",
-  "types": "./src/index.ts",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
   "exports": {
     ".": {
-      "types": "./src/index.ts",
-      "import": "./src/index.ts"
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
     }
   },
   "files": [
-    "src"
+    "dist"
   ],
   "scripts": {
     "test": "bun test",
     "test:watch": "bun test --watch",
-    "typecheck": "bun run tsc --noEmit"
+    "typecheck": "bun run tsc --noEmit",
+    "build": "bun build src/index.ts --outdir dist --target node --format esm && tsc --emitDeclarationOnly --outDir dist",
+    "prepublishOnly": "bun run build"
   },
   "keywords": [
     "kustodian",
@@ -32,11 +34,13 @@
     "directory": "packages/nodes"
   },
   "publishConfig": {
-    "registry": "https://npm.pkg.github.com"
+    "access": "public",
+    "registry": "https://registry.npmjs.org"
   },
   "dependencies": {
-    "@kustodian/core": "1.1.0",
-    "@kustodian/schema": "1.3.0"
+    "@kustodian/core": "2.0.0",
+    "@kustodian/k8s": "2.0.0",
+    "@kustodian/schema": "2.0.0"
   },
   "devDependencies": {}
 }

package/src/labeler.ts

@@ -1,201 +0,0 @@
-import { type ResultType, success } from '@kustodian/core';
-import type { KustodianErrorType } from '@kustodian/core';
-
-import { type NodeListType, type NodeType, format_node_labels } from './types.js';
-
-/**
- * Label operation types.
- */
-export type LabelOperationType = 'add' | 'update' | 'remove';
-
-/**
- * A single label change to be applied.
- */
-export interface LabelChangeType {
-  node: string;
-  key: string;
-  value?: string;
-  operation: LabelOperationType;
-}
-
-/**
- * Options for the label sync operation.
- */
-export interface LabelSyncOptionsType {
-  dry_run?: boolean;
-  verify?: boolean;
-}
-
-/**
- * Result of a label sync operation.
- */
-export interface LabelSyncResultType {
-  changes: LabelChangeType[];
-  applied: number;
-  skipped: number;
-}
-
-/**
- * Calculates the label changes needed for a node.
- */
-export function calculate_label_changes(
-  node: NodeType,
-  current_labels: Record<string, string>,
-  prefix: string,
-): LabelChangeType[] {
-  const changes: LabelChangeType[] = [];
-  const desired_labels = format_node_labels(node.labels, prefix);
-
-  // Find labels to add or update
-  for (const [key, value] of Object.entries(desired_labels)) {
-    const current_value = current_labels[key];
-
-    if (current_value === undefined) {
-      changes.push({
-        node: node.name,
-        key,
-        value,
-        operation: 'add',
-      });
-    } else if (current_value !== value) {
-      changes.push({
-        node: node.name,
-        key,
-        value,
-        operation: 'update',
-      });
-    }
-  }
-
-  // Find labels to remove (labels with prefix that aren't in desired)
-  for (const key of Object.keys(current_labels)) {
-    if (key.startsWith(`${prefix}/`) && !(key in desired_labels)) {
-      changes.push({
-        node: node.name,
-        key,
-        operation: 'remove',
-      });
-    }
-  }
-
-  return changes;
-}
-
-/**
- * Calculates all label changes for a node list.
- */
-export function calculate_all_label_changes(
-  node_list: NodeListType,
-  current_labels_by_node: Map<string, Record<string, string>>,
-): LabelChangeType[] {
-  const prefix = node_list.label_prefix ?? 'kustodian.io';
-  const all_changes: LabelChangeType[] = [];
-
-  for (const node of node_list.nodes) {
-    const current_labels = current_labels_by_node.get(node.name) ?? {};
-    const changes = calculate_label_changes(node, current_labels, prefix);
-    all_changes.push(...changes);
-  }
-
-  return all_changes;
-}
-
-/**
- * Formats a label change for display.
- */
-export function format_label_change(change: LabelChangeType): string {
-  switch (change.operation) {
-    case 'add':
-      return `[+] ${change.node}: ${change.key}=${change.value}`;
-    case 'update':
-      return `[~] ${change.node}: ${change.key}=${change.value}`;
-    case 'remove':
-      return `[-] ${change.node}: ${change.key}`;
-  }
-}
-
-/**
- * Groups label changes by node.
- */
-export function group_changes_by_node(changes: LabelChangeType[]): Map<string, LabelChangeType[]> {
-  const grouped = new Map<string, LabelChangeType[]>();
-
-  for (const change of changes) {
-    const node_changes = grouped.get(change.node) ?? [];
-    node_changes.push(change);
-    grouped.set(change.node, node_changes);
-  }
-
-  return grouped;
-}
-
-/**
- * Creates a dry-run result from label changes.
- */
-export function create_dry_run_result(changes: LabelChangeType[]): LabelSyncResultType {
-  return {
-    changes,
-    applied: 0,
-    skipped: changes.length,
-  };
-}
-
-/**
- * Node labeler service interface.
- * This is implemented by the actual Kubernetes client.
- */
-export interface NodeLabelerType {
-  /**
-   * Gets the current labels for a node.
-   */
-  get_labels(node_name: string): Promise<ResultType<Record<string, string>, KustodianErrorType>>;
-
-  /**
-   * Applies a label change to a node.
-   */
-  apply_change(change: LabelChangeType): Promise<ResultType<void, KustodianErrorType>>;
-
-  /**
-   * Syncs labels for all nodes in the list.
-   */
-  sync_labels(
-    node_list: NodeListType,
-    options?: LabelSyncOptionsType,
-  ): Promise<ResultType<LabelSyncResultType, KustodianErrorType>>;
-}
-
-/**
- * Creates a mock labeler for testing.
- */
-export function create_mock_labeler(
-  labels_by_node: Map<string, Record<string, string>>,
-): NodeLabelerType {
-  return {
-    async get_labels(node_name) {
-      const labels = labels_by_node.get(node_name);
-      if (!labels) {
-        return success({});
-      }
-      return success(labels);
-    },
-
-    async apply_change(_change) {
-      return success(undefined);
-    },
-
-    async sync_labels(node_list, options) {
-      const changes = calculate_all_label_changes(node_list, labels_by_node);
-
-      if (options?.dry_run) {
-        return success(create_dry_run_result(changes));
-      }
-
-      // In mock, all changes are "applied"
-      return success({
-        changes,
-        applied: changes.length,
-        skipped: 0,
-      });
-    },
-  };
-}

package/src/profile.ts

@@ -1,184 +0,0 @@
-import type { NodeType, TaintType } from './types.js';
-
-/**
- * Node profile type for profile resolution.
- * This mirrors the NodeProfileType from @kustodian/schema but is defined here
- * to avoid circular dependencies.
- */
-export interface NodeProfileType {
-  name: string;
-  display_name?: string;
-  description?: string;
-  labels?: Record<string, string | boolean | number>;
-  taints?: TaintType[];
-  annotations?: Record<string, string>;
-}
-
-/**
- * Resolved node type with profile values merged.
- * The profile field is removed after resolution.
- */
-export type ResolvedNodeType = Omit<NodeType, 'profile'>;
-
-/**
- * Merges taints from profile and node.
- * Node taints are appended after profile taints.
- * Duplicate taints (same key+effect) from node override profile taints.
- */
-function merge_taints(
-  profile_taints: TaintType[] | undefined,
-  node_taints: TaintType[] | undefined,
-): TaintType[] | undefined {
-  if (!profile_taints && !node_taints) {
-    return undefined;
-  }
-
-  if (!profile_taints) {
-    return node_taints;
-  }
-
-  if (!node_taints) {
-    return profile_taints;
-  }
-
-  // Create a map of node taints keyed by key+effect for deduplication
-  const node_taint_keys = new Set(node_taints.map((t) => `${t.key}:${t.effect}`));
-
-  // Filter out profile taints that are overridden by node taints
-  const filtered_profile_taints = profile_taints.filter(
-    (t) => !node_taint_keys.has(`${t.key}:${t.effect}`),
-  );
-
-  return [...filtered_profile_taints, ...node_taints];
-}
-
-/**
- * Resolves a node with its profile configuration.
- * Profile values are merged with node values, where node values take precedence.
- *
- * Merge strategy:
- * - labels: Profile labels are base, node labels override/extend
- * - taints: Node taints override profile taints with same key+effect, others are combined
- * - annotations: Profile annotations are base, node annotations override/extend
- * - ssh: Not inherited from profile (kept as node-specific)
- *
- * @param node - The node to resolve
- * @param profile - The profile to apply, or undefined if no profile
- * @returns The resolved node with profile values merged
- */
-export function resolve_node_profile(
-  node: NodeType,
-  profile: NodeProfileType | undefined,
-): ResolvedNodeType {
-  if (!profile) {
-    // No profile to apply, return node without profile field
-    const { profile: _, ...resolved } = node;
-    return resolved;
-  }
-
-  // Merge labels: profile as base, node overrides
-  const merged_labels =
-    profile.labels || node.labels ? { ...profile.labels, ...node.labels } : undefined;
-
-  // Merge taints: deduplicate by key+effect, node wins
-  const merged_taints = merge_taints(profile.taints, node.taints);
-
-  // Merge annotations: profile as base, node overrides
-  const merged_annotations =
-    profile.annotations || node.annotations
-      ? { ...profile.annotations, ...node.annotations }
-      : undefined;
-
-  const resolved: ResolvedNodeType = {
-    name: node.name,
-    role: node.role,
-    address: node.address,
-  };
-
-  if (node.ssh !== undefined) {
-    resolved.ssh = node.ssh;
-  }
-  if (merged_labels !== undefined) {
-    resolved.labels = merged_labels;
-  }
-  if (merged_taints !== undefined) {
-    resolved.taints = merged_taints;
-  }
-  if (merged_annotations !== undefined) {
-    resolved.annotations = merged_annotations;
-  }
-
-  return resolved;
-}
-
-/**
- * Resolves all nodes in a list with their profiles.
- *
- * @param nodes - The nodes to resolve
- * @param profiles - Map of profile name to profile
- * @returns Object with resolved nodes and any missing profile errors
- */
-export function resolve_all_node_profiles(
-  nodes: NodeType[],
-  profiles: Map<string, NodeProfileType>,
-): { resolved: ResolvedNodeType[]; errors: string[] } {
-  const resolved: ResolvedNodeType[] = [];
-  const errors: string[] = [];
-
-  for (const node of nodes) {
-    if (node.profile) {
-      const profile = profiles.get(node.profile);
-      if (!profile) {
-        errors.push(`Node '${node.name}' references unknown profile '${node.profile}'`);
-        // Still resolve the node without the profile
-        const { profile: _, ...node_without_profile } = node;
-        resolved.push(node_without_profile);
-      } else {
-        resolved.push(resolve_node_profile(node, profile));
-      }
-    } else {
-      resolved.push(resolve_node_profile(node, undefined));
-    }
-  }
-
-  return { resolved, errors };
-}
-
-/**
- * Collects all unique profile names referenced by nodes.
- */
-export function get_referenced_profiles(nodes: NodeType[]): Set<string> {
-  const profiles = new Set<string>();
-  for (const node of nodes) {
-    if (node.profile) {
-      profiles.add(node.profile);
-    }
-  }
-  return profiles;
-}
-
-/**
- * Validates that all referenced profiles exist.
- *
- * @param nodes - The nodes to check
- * @param profiles - Map of available profiles
- * @returns Array of error messages for missing profiles
- */
-export function validate_profile_references(
-  nodes: NodeType[],
-  profiles: Map<string, NodeProfileType>,
-): string[] {
-  const errors: string[] = [];
-  const referenced = get_referenced_profiles(nodes);
-
-  for (const profile_name of referenced) {
-    if (!profiles.has(profile_name)) {
-      const nodes_using = nodes.filter((n) => n.profile === profile_name).map((n) => n.name);
-      errors.push(
-        `Profile '${profile_name}' not found, referenced by nodes: ${nodes_using.join(', ')}`,
-      );
-    }
-  }
-
-  return errors;
-}

package/src/types.ts

@@ -1,137 +0,0 @@
-/**
- * Node role in the cluster.
- */
-export type NodeRoleType = 'controller' | 'worker' | 'controller+worker';
-
-/**
- * SSH configuration for connecting to a node.
- */
-export interface SshConfigType {
-  user?: string;
-  key_path?: string;
-  known_hosts_path?: string;
-  port?: number;
-}
-
-/**
- * Kubernetes taint configuration.
- */
-export interface TaintType {
-  key: string;
-  value?: string;
-  effect: 'NoSchedule' | 'PreferNoSchedule' | 'NoExecute';
-}
-
-/**
- * Node definition with its configuration.
- */
-export interface NodeType {
-  name: string;
-  role: NodeRoleType;
-  address: string;
-  profile?: string;
-  ssh?: SshConfigType;
-  labels?: Record<string, string | boolean | number>;
-  taints?: TaintType[];
-  annotations?: Record<string, string>;
-}
-
-/**
- * Node list with default SSH configuration.
- */
-export interface NodeListType {
-  cluster: string;
-  label_prefix?: string;
-  ssh?: SshConfigType;
-  nodes: NodeType[];
-}
-
-/**
- * Default label prefix.
- */
-export const DEFAULT_LABEL_PREFIX = 'kustodian.io';
-
-/**
- * Formats a label key with the configured prefix.
- */
-export function format_label_key(key: string, prefix: string = DEFAULT_LABEL_PREFIX): string {
-  // If key already has a prefix (contains /), return as-is
-  if (key.includes('/')) {
-    return key;
-  }
-  return `${prefix}/${key}`;
-}
-
-/**
- * Formats a label value as a string.
- */
-export function format_label_value(value: string | boolean | number): string {
-  if (typeof value === 'boolean') {
-    return value ? 'true' : 'false';
-  }
-  return String(value);
-}
-
-/**
- * Formats all labels for a node with the configured prefix.
- */
-export function format_node_labels(
-  labels: Record<string, string | boolean | number> | undefined,
-  prefix: string = DEFAULT_LABEL_PREFIX,
-): Record<string, string> {
-  if (!labels) {
-    return {};
-  }
-
-  const result: Record<string, string> = {};
-  for (const [key, value] of Object.entries(labels)) {
-    const formatted_key = format_label_key(key, prefix);
-    result[formatted_key] = format_label_value(value);
-  }
-  return result;
-}
-
-/**
- * Gets the SSH configuration for a node, merging with defaults.
- */
-export function get_node_ssh_config(node: NodeType, default_ssh?: SshConfigType): SshConfigType {
-  return {
-    ...default_ssh,
-    ...node.ssh,
-  };
-}
-
-/**
- * Checks if a node has a controller role.
- */
-export function is_controller(node: NodeType): boolean {
-  return node.role === 'controller' || node.role === 'controller+worker';
-}
-
-/**
- * Checks if a node has a worker role.
- */
-export function is_worker(node: NodeType): boolean {
-  return node.role === 'worker' || node.role === 'controller+worker';
-}
-
-/**
- * Gets all controller nodes from a node list.
- */
-export function get_controllers(nodes: NodeType[]): NodeType[] {
-  return nodes.filter(is_controller);
-}
-
-/**
- * Gets all worker nodes from a node list.
- */
-export function get_workers(nodes: NodeType[]): NodeType[] {
-  return nodes.filter(is_worker);
-}
-
-/**
- * Gets the primary controller node (first controller).
- */
-export function get_primary_controller(nodes: NodeType[]): NodeType | undefined {
-  return nodes.find(is_controller);
-}